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IMPROVED SECURITY SYSTEM^ 
Field of the Invention SSL^^ 

This invention relates to an improved security system and relates 
particularly to a security system which permits authorised keyless actuation of a 
5 locking system, a control system, or the like, to permit entry through or past a 
closure, such as a door, into a building, secure area or motor vehicle, or 
actuation of control circuits permitting operation of a motor vehicle or the like. 



10 



Background of the Invention 

The invention will be described with particular reference to its 
application to a motor vehicle, but it will be understood that the principles of the 
invention apply to a wide range of applications. 

Many forms of security systems have been proposed for motor vehicles 
which enable an authorised person to obtain access to the vehicle without the 
15 use of a key to physically unlock the vehicle doors. Such known systems 
include the provision of radio transmitter devices which, on actuation by a push 
button, cause the vehicle to unlock. These systems require the relatively bulky 
radio transmitter to be carried by the authorised person. Other systems, 
commonly known as "passive access" systems, enable an electronic 
20 identification device carried by an authorised person to actuate the locking 
mechanism of a locked vehicle. With such a system, the vehicle transmits a 
message to the electronic identification device when the person touches the 
vehicle door handle or triggers a short range proximity sensor in the vehicle. 
Typically, the message contains vehicle identification information so that the 
25 electronic identification device can determine whether or not to respond. The 
vehicle transmission may also contain a random number. If the vehicle 
identification code is correct, the random number is manipulated by the 
electronic identification device according to an algorithm. The result of the 
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manipulation is then transmitted to the vehicle which compares the response to 
an expected response. If the transmitted response and expected response match, 
the vehicle is unlocked 

The system may also include vehicle operation authentication whereby a 
5 similar process is repeated when the vehicle operator attempts to start the 
vehicle. 

In this instance, it is desirable for the system to be able to determine 
whether or not the identification device is inside the vehicle. Therefore, 
typically, the vehicle's signal transmission is controlled so that it is unlikely that 
10 the identification device could detect the signal from outside the vehicle. 

The known passive access system described above provides a remote 
keyless entry system which allows authorised entry to and operation of a vehicle 
by an authorised person, carrying the electronic identification device, simply 
walking up to the vehicle, opening the door and driving off. However, the 
15 system is vulnerable to an unauthorised person obtaining access to the vehicle. 
An attack on the security takes advantage of the contactless operation of the 
electronic identification device and the ability to activate that device remotely 
without the knowledge of the authorised owner. The attack works as follows: 

The authorised owner of the vehicle locks the vehicle and walks 
20 away, beyond the normal range of communication between the 

electronic identification device and the vehicle communication 

system. A person carrying a transceiver follows the operator. 

Another person carrying a second transceiver stays with the vehicle. 

The person" near the vehicle triggers the vehicle to transmit its 
25 identification message, such as by touching the door handle or 

triggering a proximity sensor in the vehicle. The transceiver carried 

by that person relays the vehicle's transmission to the transceiver of 
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the second person near the authorised operator. The electronic 
identification device carried by the authorised operator receives the 
relayed vehicle transmission and responds. This response is 
received by the transceiver carried by the person near the owner and 
5 the response is relayed back to the transceiver carried by the person 

near the vehicle which transmits the identification device response 
and the vehicle, receiving a valid response, unlocks the vehicle. 
While proposals have been made to resolve the potential security 
problem, such proposals are relatively expensive and difficult to implement. 
10 One such proposal requires a further parameter to be determined, such as the 
distance between the vehicle and the electronic identification device, and the 
system is arranged so that the vehicle will only unlock if that distance is no 
greater than a predetermined maximum. While this additional proximity criteria 
is effective in most circumstances, it is a technically difficult and relatively 
1 5 expensive solution. 

It is therefore desirable to provide an improved passive access security 
system which obviates the difficulties of the known system. 

It is also desirable to provide an improved passive access security system 
which is relatively simple and economic to implement 
20 It is also desirable to provide an improved passive access security system 

which is robust and immune to attack using easily available, portable equipment 
such as transceivers. 

Summary of the Invention 
25 In accordance with one aspect of the invention there is provided a 

security system having transponder means adapted to be actuated to generate 
and transmit an electromagnetic trigger signal, and a portable electronic device 
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adapted to receive and respond to said trigger signal by transmitting a response 
signal, the receipt and authentication of which by the transponder means gives 
rise to a predetermined event, said response signal comprising one or more radio 
frequency signals of a frequency and duration determined by an algorithm 
5 together with a unique stored number with reference to a random number 
contained in the trigger signal. 

In one embodiment of the security system of the invention incorporated 
into a motor vehicle, the transponder means is adapted to be actuated either by a 
proximity sensor or by a person touching the vehicle, lifting a door handle or 
10 otherwise signalling the transponder means. When an authenticated response 
signal is received by the transponder means, it causes the vehicle door or doors 
to become unlocked, in a known manner. 

The present invention seeks to avoid unauthorised defeat by varying the 
communications between the transponder means and die portable electronic 
15 device. With present passive access systems as described above, the 
communication transmissions are of fixed frequencies and in relatively narrow 
bandwidths. With the present invention, the communication signals can be 
throughout a relatively broad spectrum of frequencies, such as from 200 MHz to 
400 MHz, or even broader. With such a possible bandwidth, it is virtually 
20 impossible for a person with a transceiver or similar device to monitor, detect 
and retransmit the response signal. A person attempting to defeat the system 
would need to relay the entire 200 MHz band to an accomplice, but the wide 
bandwidth coupled with the low level of the target signal make implementation 
extremely unlikely. 

25 In one form of the invention, the use of an algorithm with a unique stored 

number to manipulate the random number contained in the trigger signal means 
that both the frequency of the response signal and the number and length of 
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transmitted. pulse trains can be varied. The transponder means is able to tune its 
receiver to the frequencies of the expected response signal. 

In order that the invention is more readily understood, one embodiment 
will now be described with reference to the accompanying drawings. 

5 

Description of the drawings 

Figure 1 is a schematic view of a vehicle incorporating a security system 
in accordance with the invention, and 

Figure 2 is a block diagram schematically illustrating the features of the 
10 invention. 

Description of the Preferred Embodiment 

Referring to the drawings, in the embodiment illustrated, a proximity 
sensor 12 is located in a vehicle 14 and senses, in a known manner, the presence 

15 of a person adjacent the vehicle 14. The proximity sensor 12 may sense a 
person touching a vehicle door handle, or sense an attempt to actuate a door 
handle which activates a switch. Alternatively, the sensor 12 may comprise a 
short range proximity sensor located in the vehicle using, for example, 
capacitive monitoring to sense the presence of a person adjacent the vehicle. 

20 When the proximity sensor 12 is activated, it causes a vehicle transponder 16 in 
the vehicle 14 to transmit a radio frequency trigger signal at a predetermined, 

^ , fixed carrier frequency. This trigger signal includes a random number generated 
by random number generator 17 associated with the transponder 16. The trigger 
signal also incorporates coded vehicle identification information that uniquely 

25 identifies the vehicle 14. The trigger signal may be transmitted a predetermined 
number of times, or over a predetermined period, following activation of the 
proximity sensor. Alternatively, one trigger signal may be transmitted for each 
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proximity sensor activation. 

The random number generated by the generator 17 is used to establish 
one or more frequencies to which the transponder receiver 26 in the vehicle is to 
be tuned to receive a response to the transmitted trigger signal. In this 
embodiment, the RF frequencies may vary between 200 MHz and 400MHz, 
although it will be appreciated that a broader or different bandwidth may be 
used. 

At least one electronic identification device 18 is associated with the 
vehicle transponder 16. The device 18 has receiver and decoder circuitry 19 to 
receive and decode a received signal, a processor 21 and a transmitter 24. A 
unique identification number together with vehicle identification information is 
held in a store 23, and the processor is programmed to conduct calculations in 
accordance with an algorithm 22. 

If the person sensed by the proximity sensor 12 is carrying an electronic 
identification device 18, the device receives the trigger signal in the receiver and 
decoder circuitry 19 and determines if the transmitted coded vehicle 
identification information matches the stored vehicle information in the device. 
If the received and stored information matches, the random number included 
with the trigger signal is manipulated in processor 21 using an algorithm 22 and 
the stored unique number in the store 23. The processor thereby generates a 
resulting response signal that comprises one or more bursts of RF energy of 
given duration and at one or more frequencies, the three variables (number of 
pulses generated, their duration and the RF frequencies of the pulses) being 
determined by the algorithm working with the unique stored number in 
conjunction with the random number transmitted from the vehicle 14. The 
response signal is transmitted by the transmitter 24 and received by a receiver 
26 associated with the transponder 16 in the vehicle 14. 
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As indicated above, in generating and transmitting the trigger signal, 
which carries the random number, the receiver 26 in the vehicle is tuned to the 
frequencies of the expected response signal in accordance with the transmitted 
random number. On receipt of a response signal of the appropriate frequency or 
5 frequencies, a comparator 27 compares the response signal with the expected 
signal, it being understood that the transponder stores the unique identification 
number of the device and is able to use the same algorithm to calculate the 
expected response? If the received response signal matches the expected 
response, a signal is sent to a door lock actuator 28 to unlock the vehicle 
10 door(s). 

If vehicle operation authentication is also required of the system, the 
information exchange described above is repeated when the operator attempts to 
start the vehicle. In this instance, it is desirable for the system to determine if 
the identification device 18 is inside the vehicle 14. Accordingly, the power of 

15 the trigger signal transmitted by the transponder for this function is controlled so 
that it is unlikely that the identification device 18 could detect the signal from 
outside the vehicle. This ensures that the vehicle cannot be operated unless the 
identification device is within the vehicle. If desired, the system may be 
designed such that the identification device must be mounted in an appropriate 

20 receptacle in the vehicle before the vehicle is able to be started. 

It will be appreciated that the security system of the described 
embodiment is more secure than the previous systems of a similar type as 
described herein by reason of the use of a variable signal frequency within a 
wide bandwidth for the response signal. Further, by using an algorithm together 

25 with an unique identification number to manipulate the transmitted random 
number and generate a response signal having at least three variables, vis, the 
number of pulses, the duration of the pulses and the RF frequencies of the 
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individual pulses, it will be very difficult to attack the system by the use of 
normal, portable transceivers. 

It will be appreciated that the response signal may also include other 
variables, such as a polling identification number, the polling of which is 

5 determined by the random number. 

A security system of the invention may be made substantially more 
immune to interfering external RF sources than currently known systems by the 
use of the variable frequency of the response signal. If access to a vehicle is 
blocked because of an interfering RF signal source, re-activation of the trigger 

10 signal will generally give rise to a response signal having a frequency that is not 
interfered with by the RF source. However, some redundancy should be made in 
the identification device's response coding to allow for masking which may 
occur due to interfering external signals at spot frequencies. 

It will be appreciated that the principals of this invention may be used in 

15 a large number of different applications, such as security access associated with 
buildings, including external doors, internal doors, lifts, maintenance areas and 
the like. The principals may also be used to provide authorisation for activities 
other than access. Thus, the system may be designed to permit only authorised 
use of equipment 

20 



